epg search result viewer cross-site request forgery vulnerability

epg search result viewer kkcald is a TV program search result viewer. A cross-site request forgery vulnerability exists in epg search result viewer kkcald version 0.7.21 and earlier. A remote attacker can exploit this vulnerability to perform unauthorized operations via a malicious page...

epg search result viewer buffer overflow vulnerability

epg search result viewer kkcald is a TV program search result viewer. A buffer overflow vulnerability exists in epg search result viewer kkcald version 0.7.19 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service...

CVE-2018-0510

Buffer overflow in epg search result viewer kkcald 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS denial of service attacks via unspecified vectors...

CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0509

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0510

CVE-2018-0510 affects the epg search result viewer (kkcald). A buffer overflow exists in version 0.7.19 and earlier, allowing remote attackers to cause unintended operations or a denial of service. Connected sources jointly confirm this vulnerability and list the affected product as kkcald’s epg ...

CVE-2018-0508

CVE-2018-0508 affects the epg search result viewer (kkcald) up to version 0.7.21. The vulnerability is a cross-site scripting (CWE-79) that allows an attacker to inject arbitrary web script or HTML via unspecified vectors, potentially enabling arbitrary script execution in the logged-in user’s br...

Multiple vulnerabilities in epg search result viewer(kkcald)

Overview epg search result viewerkkcald provided by kkcal contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0508 Cross-site request forgery CWE-352 - CVE-2018-0509 Buffer overflow CWE-121 - CVE-2018-0510 Kusano Kazuhiko reported this vulnerability to IPA...

CVE-2018-0509: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0510: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in epg search result viewer kkcald 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS denial of service attacks via unspecified vectors...

CVE-2018-0508: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8867

Name of the Vulnerable Software and Affected Versions kkcald versions 0.7.21 and earlier Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 0.7.21 and earlier, update to a version later than 0.7....

PT-2018-8869

Name of the Vulnerable Software and Affected Versions kkcald versions 0.7.19 and earlier Description The issue allows remote attackers to perform unintended operations or execute denial of service attacks via unspecified vectors. Recommendations For versions 0.7.19 and earlier, at the moment, the...

PT-2018-8868

Name of the Vulnerable Software and Affected Versions kkcald versions 0.7.21 and earlier Description A cross-site request forgery CSRF issue allows an attacker to hijack the authentication of administrators via unspecified vectors. Recommendations For versions 0.7.21 and earlier, update to a...